news.mlab.sh
Vulnerabilities
Vulnerability

CVE-2026-46184

Reference data from vuln.mlab.sh, coverage from our own index.

CVSS
5.5 Medium
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Risk score
44.0
Published
2026-05-28
Status
Published

In the Linux kernel, the following vulnerability has been resolved: sound: ua101: fix division by zero at probe Add a missing sanity check for bNrChannels in detect_usb_format() to prevent a division by zero in playback_urb_complete() and capture_urb_complete(). USB core does not validate class-specific descriptor fields such as bNrChannels, so drivers must verify them before use. If a device provides bNrChannels = 0, frame_bytes becomes zero and is later used as a divisor in the URB completion handlers, leading to a kernel crash. A flaw was found in the Linux kernel's `ua101` USB audio driver. A local attacker, by connecting a specially crafted USB audio device, could trigger a division-by-zero error. This occurs because the driver fails to validate the `bNrChannels` field, leading to a kernel crash. This vulnerability results in a Denial of Service (DoS) for the affected system.

Weaknesses

CWE-369

Coverage 7

Advisories and references